1.Controller

The controller of your personal data is:

(“we”, “us” or the “Seller”). For any questions about personal data, or to exercise your rights, contact us at shop@pressburgmint.com or by post at the address above.

2.Personal data we process

• Identification and contact data – name and surname, delivery and billing address, e-mail address and telephone number.
• Business Buyer data – company name, Company ID, tax ID, VAT ID and contact person.
• Order and payment data – ordered Goods, prices, payment method and status, and invoices. Card and payment account details are processed directly by payment service providers; we do not store full card details.
• Anti-money laundering data – where required by law, for example identity document details, date of birth, nationality, information on the source of funds, the beneficial owner and politically exposed person status.
• Customer account data – login details, order history and saved addresses.
• Communication data – the content of e-mails, complaints and other messages.
• Marketing data – e-mail address and newsletter preferences.
• Technical data and online identifiers – IP address, device and browser information, and data on how you use the website, collected through cookies and similar technologies.

3.Purposes and legal bases

4.How long we keep your data

We keep personal data only for as long as necessary for the purpose for which it was collected, in particular:

• Contract and order data – for the duration of the contractual relationship and then for the limitation periods under Slovak law, to exercise or defend legal claims.
• Accounting documents, including invoices – 10 years following the year to which they relate (Act No. 431/2002 Coll.).
• Anti-money laundering data and documents – 5 years from the end of the contractual relationship or from the transaction, or longer if required by the Financial Intelligence Unit (Act No. 297/2008 Coll.).
• Complaint records – for the liability period and the related limitation periods.
• Customer account – until you delete your account or ask us to delete it, subject to the periods above.
• Newsletter – until you unsubscribe or withdraw your consent.
• Cookies – for the period stated in our Cookie Policy.

5.Recipients of personal data

We share personal data only to the extent necessary, with:

• carriers and delivery services (for example FedEx and postal service providers), to deliver your order;
• payment service providers (for example Stripe, PayPal and NOWPayments), to process payments;
• invoicing and accounting service providers (for example SuperFaktúra), and our external accountants and auditors;
• providers of e-mail, newsletter and marketing tools (for example Omnisend and ActiveCampaign);
• providers of analytics, advertising and consent management tools (for example Contentsquare, Meta Platforms and CookieYes), only with your consent where required;
• IT, hosting and e-mail delivery providers;
• public authorities, such as tax authorities, the Financial Intelligence Unit, the Slovak Trade Inspection or courts, where required by law.

Our service providers process personal data either on our behalf and under our instructions as processors, or as independent controllers under their own privacy policies (in particular payment and delivery providers).

6.Transfers outside the EU/EEA

Some of our service providers are based outside the European Economic Area, in particular in the United States. We transfer personal data only where an adequate level of protection is ensured, in particular on the basis of an adequacy decision of the European Commission (including the EU–U.S. Data Privacy Framework) or standard contractual clauses approved by the European Commission.

7.Your rights

Under the GDPR, you have the right to:

• access your personal data (Art. 15);
• rectification of inaccurate or incomplete data (Art. 16);
• erasure of your data, where legal grounds apply (Art. 17);
• restriction of processing (Art. 18);
• data portability (Art. 20);
• object to processing based on legitimate interest, and at any time to processing for direct marketing (Art. 21);
• withdraw your consent at any time, without affecting the lawfulness of processing before its withdrawal;
• lodge a complaint with the supervisory authority.

You can exercise your rights by e-mail to shop@pressburgmint.com. We will respond without undue delay and in any case within one month of receiving your request. This period may be extended in cases provided by the GDPR. We may ask you to verify your identity.

8.Is providing personal data mandatory?

Providing the data required in the order is a contractual requirement; without it we cannot conclude or perform the Purchase Contract. Providing identification data under anti-money laundering rules is a statutory requirement; if it is not provided, we must refuse the order (Article XI of the General Terms and Conditions). Providing data for marketing purposes is voluntary.

9.Automated decision-making

We do not use automated decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you.

10.Security

We protect personal data with appropriate technical and organisational measures, including encrypted connections, access controls and backups. Access to personal data is limited to persons who need it to perform their tasks and who are bound by confidentiality.

11.Cookies

Information about the cookies we use and how to manage your consent is set out in our Cookie Policy.

12.Changes to this Privacy Policy

We may update this Privacy Policy, in particular when our services or legal requirements change. The current version is always published on this page, with its effective date stated at the top.